CVE-20XX-?

Microsoft Windows Server 2008 CVEs.

Published CVEs affecting Microsoft Windows Server 2008, ranked by exploit odds.

54 CVEs · updated 2026-11-06 06:24 UTC

  1. CVE-2025-27740

    Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

    Microsoft Windows Server 2008

    8.8 HIGH 4% exploit odds Fix listed
  2. CVE-2025-26647

    Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

    Microsoft Windows Server 2008

    8.8 HIGH 2% exploit odds Fix listed
  3. CVE-2025-29968

    Improper input validation in Active Directory Certificate Services (AD CS) allows an authorized attacker to deny service over a network.

    Other OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 2% exploit odds Fix listed
  4. CVE-2025-26664

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Microsoft Windows Server 2008

    6.5 MEDIUM 2% exploit odds Fix listed
  5. CVE-2025-26667

    Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Microsoft Windows Server 2008

    6.5 MEDIUM 2% exploit odds Fix listed
  6. CVE-2025-27474

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Microsoft Windows Server 2008

    6.5 MEDIUM 2% exploit odds Fix listed
  7. CVE-2025-21410

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Microsoft Windows Server 2008

    8.8 HIGH 2% exploit odds Fix listed
  8. CVE-2025-21208

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    Microsoft Windows Server 2008

    8.8 HIGH 2% exploit odds Fix listed
  9. CVE-2025-21203

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Microsoft Windows Server 2008

    6.5 MEDIUM 2% exploit odds Fix listed
  10. CVE-2025-26676

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Microsoft Windows Server 2008

    6.5 MEDIUM 2% exploit odds Fix listed
  11. CVE-2025-49716

    Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

    Denial of service OS & kernel Microsoft Windows Server 2008

    7.5 HIGH 2% exploit odds Fix listed
  12. CVE-2025-21297

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Microsoft Windows Server 2008

    8.1 HIGH 1% exploit odds Fix listed
  13. CVE-2025-53719

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    5.7 MEDIUM 1% exploit odds Fix listed
  14. CVE-2025-24064

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2008

    8.1 HIGH 1% exploit odds Fix listed
  15. CVE-2025-55225

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  16. CVE-2025-50156

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    5.7 MEDIUM 1% exploit odds Fix listed
  17. CVE-2025-50157

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    5.7 MEDIUM 1% exploit odds Fix listed
  18. CVE-2025-53138

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    5.7 MEDIUM 1% exploit odds Fix listed
  19. CVE-2025-53148

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    5.7 MEDIUM 1% exploit odds Fix listed
  20. CVE-2025-53153

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    5.7 MEDIUM 1% exploit odds Fix listed
  21. CVE-2025-49671

    Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  22. CVE-2025-49681

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  23. CVE-2025-26671

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2008

    8.1 HIGH 1% exploit odds Fix listed
  24. CVE-2025-53796

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  25. CVE-2025-53797

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  26. CVE-2025-53798

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  27. CVE-2025-53806

    Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  28. CVE-2025-54095

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  29. CVE-2025-54096

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  30. CVE-2025-54097

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  31. CVE-2025-49657

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 1% exploit odds Fix listed
  32. CVE-2025-32710

    Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.1 HIGH 1% exploit odds Fix listed
  33. CVE-2025-48824

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 1% exploit odds Fix listed
  34. CVE-2025-47998

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 1% exploit odds Fix listed
  35. CVE-2025-49670

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    6.5 MEDIUM 1% exploit odds Fix listed
  36. CVE-2025-49757

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.8 HIGH 1% exploit odds Fix listed
  37. CVE-2025-29831

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    7.5 HIGH 1% exploit odds Fix listed
  38. CVE-2025-49672

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 1.0% exploit odds Fix listed
  39. CVE-2025-49676

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 1.0% exploit odds Fix listed
  40. CVE-2025-53720

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.0 HIGH 1.0% exploit odds Fix listed
  41. CVE-2025-50163

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.8 HIGH 1.0% exploit odds Fix listed
  42. CVE-2025-54113

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.8 HIGH 0.9% exploit odds Fix listed
  43. CVE-2025-50160

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.0 HIGH 0.9% exploit odds Fix listed
  44. CVE-2025-50162

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.0 HIGH 0.9% exploit odds Fix listed
  45. CVE-2025-50164

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

    Memory safety OS & kernel Microsoft Windows Server 2008

    8.0 HIGH 0.9% exploit odds Fix listed
  46. CVE-2025-49663

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 0.9% exploit odds Fix listed
  47. CVE-2025-49668

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 0.9% exploit odds Fix listed
  48. CVE-2025-49669

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 0.9% exploit odds Fix listed
  49. CVE-2025-49673

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 0.9% exploit odds Fix listed
  50. CVE-2025-49753

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

    Memory safety Network gear Microsoft Windows Server 2008

    8.8 HIGH 0.9% exploit odds Fix listed

All CVEs affecting Microsoft Windows Server 2008 that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.